Privacy Policy
Version 1.0 · Effective 8/1/2026
1. Introduction
Eccellenza Consulting Ltd ("BA Prism", "we", "us", "our") is committed to protecting the privacy of everyone who uses our platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.
We are the data controller for the personal data described in this policy, for the purposes of UK GDPR and the Data Protection Act 2018.
2. Who We Are
BA Prism is a professional learning platform operated by Eccellenza Consulting Ltd. Eccellenza Consulting Ltd is the Data Controller responsible for personal information collected through BA Prism.
Data Controller: Eccellenza Consulting Ltd, trading as BA Prism
Website: www.baprism.co.uk
Contact for data protection queries: privacy@baprism.co.uk
3. What Data We Collect
3.1 Information You Provide
Account details: name, email address, password (stored encrypted)
Billing details: billing address and payment information (processed by our payment provider — see section 8)
Profile information you choose to add, such as job title or organisation
Communications you send us, such as support requests or community posts
3.2 Information Collected Automatically
Learning progress data: courses started, modules completed, time spent, quiz and assessment results
Device and technical data: IP address, browser type, operating system
Usage data collected via cookies and similar technologies, detailed in our Cookie Policy
4. How We Use Your Data
To create and administer your account
To provide access to courses and track your learning progress
To issue certificates on completion of eligible courses
To process subscription payments and renewals
To communicate with you about your account, your subscription, and platform updates
To improve the platform, including through aggregated and anonymised analytics
To detect, investigate and prevent fraud, misuse or breaches of our Terms of Service
To comply with our legal and regulatory obligations
5. Our Legal Basis for Processing
We process personal data under one or more of the following:
Contract: processing necessary to provide the subscription and platform you have signed up for
Legitimate interests: improving the platform, preventing misuse, and direct communications about our services to existing subscribers
Consent: for non-essential cookies and optional marketing communications, which you may withdraw at any time
Legal obligation: where processing is required to comply with UK tax, accounting or other regulatory requirements
6. Learning Progress and Analytics Data
We record your learning progress, assessment results and certificate history in order to provide continuity across sessions and devices, and to allow you to demonstrate your professional development. This data is treated as part of your account and is subject to the same protections as other personal data described in this policy.
Where corporate licences are in place, aggregated (and, where agreed with the licensing organisation, individual) progress reporting may be made available to a nominated administrator at the licensing organisation for the purposes of monitoring team development.
7. Payment Data
Payment card details are processed directly by our payment processor and are not stored on BA Prism's own servers. We retain only the billing records necessary for accounting, tax and dispute-resolution purposes.
8. Data Sharing and Third Parties
We do not sell your personal data. We share data only with:
Service providers who support the operation of the platform, such as hosting providers, payment processors and email delivery services, each bound by contractual data protection obligations
A licensing organisation, where you access BA Prism through a corporate licence, limited to the progress reporting agreed with that organisation
Regulators, law enforcement or courts, where required by law
A buyer or successor entity in the event of a merger, acquisition or sale of business assets, subject to equivalent protections being maintained
9. International Transfers
Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or adequacy regulations, to ensure your data continues to receive an equivalent standard of protection.
10. Data Retention
We retain personal data for as long as your account remains active, and for a further period afterwards where necessary to comply with legal obligations, resolve disputes, or enforce our agreements. Further detail is set out in our Data Retention Policy.
On request, and subject to any legal retention requirements, we will delete or anonymise your personal data.
11. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data, subject to legal exceptions
Restrict or object to certain processing
Request a portable copy of your data
Withdraw consent at any time where processing is based on consent
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact privacy@baprism.co.uk. We will respond within one month, as required by law.
12. Security
We maintain appropriate technical and organisational measures to protect personal data, including encryption of passwords, access controls, and regular review of our security practices, as further described in our Security Policy.
13. Children's Data
BA Prism is designed for adult learners. Where a corporate licence permits access by learners under 18, additional safeguards apply as set out in our Safeguarding Statement, and we collect the minimum data necessary in those circumstances.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to active subscribers by email or in-platform notice before they take effect.
15. Contact
Data protection queries: projects@eccellenzaconsulting.co.uk
General support: projects@eccellenzaconsulting.co.uk